Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: KF1HcZ0Ru2pUr9DFZHfh2HznK4w1ZYE5K2R3ZEgFRIk=
Subject key identifier: 15:A2:81:59:8D:54:6D:D1:35:CC:93:FA:3D:8A:FF:56:B3:62:F0:CA
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 019D28BB10F69FE1A95998C4109F47F588C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: 4Pf-r_SG4WPumX9UfrM-bZenj0w.roa (hash: jKC/1JEZDpIqvpS0Gu3om2F42nHobr3sJ5zkUlAPeoY=)
2: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: 9Yve7S7vOL9WvuaMuG2z8mLoZz8YUpDzTxwvCyAs7ds=)
3: SPQxl-sIx_CmX8izrtv12Y7kVyA.roa (hash: QFkpuPufNbHEesw8O151p6FVQDRuzn4BSiF8hTA4/X4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:10:f6:9f:e1:a9:59:98:c4:10:9f:47:f5:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=15a281598d546dd135cc93fa3d8aff56b362f0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3e:c3:f8:26:e5:7c:1a:6c:ce:7a:99:e4:a4:
d2:c0:60:be:9c:c0:87:6f:f7:5d:8c:dd:11:35:00:
40:9f:f0:dd:a1:e7:75:a9:09:c9:02:cc:f8:f8:11:
49:3e:a9:4e:4d:28:f0:f1:fe:35:91:46:01:c6:5f:
34:ba:29:54:f6:0d:80:3e:fe:59:2c:97:84:50:7b:
e2:5e:a4:fe:46:37:c1:ac:5f:be:36:cc:c6:28:e4:
00:69:a1:4b:d1:89:40:25:2b:0d:8c:b1:2f:89:87:
dd:ce:c5:27:e1:ad:94:ed:e1:01:a7:7c:4c:06:05:
c0:0c:ed:0c:3f:44:43:34:3c:95:31:41:17:9e:b6:
42:e6:dc:4b:3e:61:41:45:fe:ea:34:8a:53:51:54:
a0:fc:58:66:b2:38:2f:ed:df:ec:5a:dd:c1:6f:64:
b6:04:c7:0e:48:da:08:b8:85:67:09:4e:69:aa:d1:
8a:38:aa:a4:bb:93:57:55:e0:b8:e6:5e:a9:28:90:
8b:03:10:a5:68:dd:69:00:b7:6f:17:5b:07:47:12:
f9:ad:25:74:aa:09:a6:7b:9d:b1:79:c8:21:33:ea:
9a:3b:61:53:66:64:dc:10:42:40:d4:b9:c8:27:49:
5c:66:04:47:a9:78:b3:f9:53:bf:9b:20:20:a7:80:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A2:81:59:8D:54:6D:D1:35:CC:93:FA:3D:8A:FF:56:B3:62:F0:CA
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:47:a6:8b:ad:d3:04:73:74:4f:f3:2f:40:21:d8:b5:dc:38:
7a:a7:d1:20:c1:82:eb:ae:5b:c3:fc:24:68:f6:7b:ed:e0:99:
5e:67:64:6d:db:a4:fe:9d:d6:d5:94:b8:0e:c0:25:9b:cd:9f:
08:54:e2:36:8d:42:8e:ae:54:26:5c:0d:cd:17:82:16:f4:fb:
62:ca:c7:48:71:61:9b:95:19:9d:30:83:92:c2:b5:42:d1:a2:
66:37:6c:ab:ca:ef:99:fd:eb:4f:b2:b2:87:58:74:58:d1:fe:
da:78:ab:92:07:a3:12:08:c9:fc:aa:91:9b:5f:d7:c1:52:2a:
57:8b:d6:97:21:e6:1a:e8:aa:21:62:69:ac:11:f5:80:f6:b8:
54:af:16:4b:70:88:94:c0:05:b8:56:f8:74:87:cc:96:48:a5:
80:2e:e4:a8:14:22:ac:0d:82:22:8a:12:fb:d0:31:f2:dc:fe:
f5:a9:4b:5c:6f:e3:4a:0c:3d:c8:23:00:20:22:a6:60:3c:f0:
b7:2d:df:77:bb:e9:62:9d:de:cb:98:f1:df:7a:4d:3c:cd:9b:
c6:b5:61:73:b0:21:bb:2b:9b:58:3d:a0:28:aa:c1:58:bc:e0:
1c:65:83:bf:24:fe:f2:d6:5a:23:46:0b:b1:a5:31:4d:e1:9c:
ca:1b:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:54 2026 by rpki-client